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data to facilitate interpreting the data or performing opera- 
tions on it, such as, but not limited to memory locations or 
devices, sets, queues, trees, heaps, lists, linked lists, arrays, 
tables, pointers, etc. A data structure is typically maintained 
in a storage mechanism. The terms "pointer" and "link" are 5 
used generically herein to identify some mechanism for 
referencing or identifying another element, component, or 
other entity, and these may include, but are not limited to a 
reference to a memory or other storage mechanism or 
tocaTionTherein, an TncTex m a"data stmcture'Y value, etc? 10 
The term "associative memory" is an extensible term, and 
refers to all types of known or future developed associative 
memories, including, but not limited to binary and ternary 
content addressable memories, hash tables, TRIE and other 
data structures, etc. Additionally, the term "associative 15 
memory unit" may include, but is not limited to one or more 
associative memory devices or parts thereof, including, but 
not limited to regions, segments, banks, pages, blocks, sets 
of entries, etc. 

The term "one embodiment" is used herein to reference a 20 
particular embodiment, wherein each reference to "one 
embodiment" may refer to a different embodiment, and the 
use of the term repeatedly herein in describing associated 
features, elements and/or limitations does not establish a 
cumulative set of associated features, elements and/or limi- 25 
tations that each and every embodiment must include, 
although an embodiment typically may include all these 
features, elements and/or limitations. In addition, the phrase 
"means for xxx" typically includes computer-readable 
medium containing computer-executable instructions for 30 
performing xxx. 

In addition, the terms "first," "second," etc. are typically 
used herein to denote different units (e.g., a first element, a 
second element). The use of these terms herein does not 
necessarily connote an ordering such as one unit or event 35 
occurring or coming before another, but rather provides a 
mechanism to distinguish between particular units. Addi- 
tionally, the use of a singular tense of a noun is non-limiting, 
with its use typically including one or more of the particular 
thing rather than just one (e.g., the use of the word 40 
"memory" typically refers to one or more memories without 
having to specify "memory or memories," or "one or more 
memories" or "at least one memory", etc.). Moreover, the 
phrases "based on x" and "in response to x" are used to 
indicate a minimum set of items x from which something is 45 
derived or caused, wherein "x" is extensible and does not 
necessarily describe a complete list of items on which the 
operation is performed, etc. Additionally, the phrase 
"coupled to" is used to indicate some level of direct or 
indirect connection between two elements or devices, with 50 
the coupling device or devices modifying or not modifying 
the coupled signal or communicated information. The term 
"subset" is used to indicate a group of all or less than all of 
the elements of a set .The term "subtree" is used to indicate 
all or less than all of a tree. Moreover, the term "or" is used 55 
herein to identify a selection of one or more, including all, 
of the conjunctive items. 

Disclosed are, inter alia, methods, apparatus, data struc- 
tures, computer-readable medium, mechanisms, and means 
for merging indications of matching items of multiple 60 
groups and possibly associated with skip conditions to 
identify winning entries of particular use for implementing 
access control lists. In one embodiment, indications are 
received from an associative memory bank indicating which 
locations were matched during a lookup operation. Each of 65 
the entries is typically associated with one or more hierar- 
chical groups and a skip or no-skip condition. The matching 
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entries are merged to identify one or more wining entries, 
these being matching entries not in a group that is skipped. 
A group is typically skipped if the highest priority matching 
entry of the particular group is associated with a skip 
condition. A priority encoder can be used to identify a single 
highest priority winning entry from the winning entries. 

One embodiment includes an associative memory bank 
which generates matching indication signals for each match- 
ing entry that matches a lookup value. A merging mecha- 
nism is used to identifying a winning entry or multiple 
winning entries, if any, from the entries identified as match- 
ing. Each of the associative memory entries is associated 
with one or more hierarchical groups and a skip or a no-skip 
condition. The merging mechanism selects a winning entry 
based on the matching indication signals from the associa- 
tive memory. This selecting typically includes identifying as 
a winning entry an entry first in the priority ordering of the 
entries that is not in a group that is skipped, wherein a 
particular group is skipped if the highest priority matching 
entry of the particular group is associated with a skip 
condition. 

One embodiment includes one or more banks of one or 
more storage elements for identifying for each entry: (a) the 
associated skip or no-skip condition, and (b) whether or not 
said particular entry is first in the order sequence of one of 
the ordered plurality of groups. In one embodiment, each 
group corresponds to a different access control list. In one 
embodiment, the merging mechanism includes circuitry for 
identifying and masking skipped entries of the matching 
entries. 

FIG. 1A is a block diagram illustrating a system used in 
one embodiment for merging indications of matching items 
of multiple groups and possibly associated with skip con- 
ditions to identify winning entries. Associative memory 
entries 100 typically correspond to two or more groups of 
entries, and each entry is typically associated with a skip/ 
no-skip condition. As shown, entries 100 correspond to 
multiple access control lists 103 (e.g., first-level groups of 
entries) and also different features 105 (e.g., second-level 
groups of entries). These associations are provided to merg- 
ing mechanism 108 as indicated by configuration informa- 
tion 106 (e.g., storage devices, received signals, etc.). Asso- 
ciative memory entries 100 are matched against a lookup 
value and generates match/no-match indications 107. These 
are typically parallel signals (e.g., one high or low signal for 
each entry indicating a match or no match), but may be any 
signaling or communications mechanism. Merging mecha- 
nism 108 identifies one or more winning entries 109 based 
on match/no -match indications 107 and configuration infor- 
mation 106. In one embodiment, merging mechanism 108 
includes a priority encoder or other mechanism to identify a 
single, highest-priority winning entry 109. 

In one embodiment, merging mechanism 108 identifies as 
the winning entry a matching entry first in the priority 
ordering of the entries that is not in a group that is skipped, 
wherein a particular group is skipped if the highest priority 
matching entry of the particular group is associated with a 
skip condition. In one embodiment, merging mechanism 108 
identifies as the winning entry an entry first in the priority 
ordering that is not in one of the hierarchical groups that is 
skipped. One embodiment supports two levels of hierarchi- 
cal groups; while one embodiment supports more than two 
levels of hierarchical groups with the exact number of levels 
being detennined typically based on the needs of a particular 
application using an embodiment. 

FIG. IB is a flow diagram illustrating a process for 
identifying a winning entry used in one embodiment. Pro- 
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Amendments to the Specification: 

Please replace the paragraph beginning on page 8, line 13, with the following 
amended paragraph: 

The term "storage mechanism" includes any type of memory, storage device or other 
mechanism for maintaining instructions or data in any format. "Computer-readable medium" 
is an extensible term including any memory, storage device, and/or storage mechanism^-and 
other storag e and signaling mochanioms including int e rfaces and devices suoh as notwork 
interfac e cards and buff e rs therein, as w e ll as any communications devic es and s ignals 
r e c e ived and transmitt e d, and other current and e volving t e chnologi e s that a comput e rized 
syst e m can interpret, receive, and/or transmit. The term "memory" includes any random access 
memory (RAM), read only memory (ROM), flash memory, integrated circuits, and/or other 
memory components or elements. The term "storage device" includes any solid state storage 
media, disk drives, diskettes, networked services, tape drives, and other storage devices. 
Memories and storage devices may store computer-executable instructions to be executed by a 
processing element and/or control logic, and data which is manipulated by a processing 
element and/or control logic. The term "data structure" is an extensible term referring to any 
data element, variable, data structure, database, and/or one or more organizational schemes 
that can be applied to data to facilitate interpreting the data or performing operations on it, 
such as, but not limited to memory locations or devices, sets, queues, trees, heaps, lists, linked 
lists, arrays, tables, pointers, etc. A data structure is typically maintained in a storage 
mechanism. The terms "pointer" and "link" are used generically herein to identify some 
mechanism for referencing or identifying another element, component, or other entity, and 
these may include, but are not limited to a reference to a memory or other storage mechanism 
or location therein, an index in a data structure, lvalue, etc. The term "associative memory"ls ^ 
an extensible term, and refers to all types of known or future developed associative memories, 
including, but not limited to binary and ternary content addressable memories, hash tables, 
TRIE and other data structures, etc. Additionally, the term "associative memory unit" may 
include, but is not limited to one or more associative memory devices or parts thereof, 
including, but not limited to regions, segments, banks, pages, blocks, sets of entries, etc. 
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